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Abstract 


Joint  Vision  2020  asserts  the  United  States  military  will  achieve  information  superiority 
over  any  future  adversary.  This  assertion  is  based  on  three  assumptions:  offensive  information 
operations  will  provide  an  accurate  and  complete  picture  of  an  adversary;  defensive  information 
operations  will  prevent  adversaries  from  attacking  friendly  information  systems;  and  the  will  of 
the  US  to  overcome  internal  limitations  to  correctly  interpret  information  will  allow  it  to 
dominate  the  information  realm  against  any  opponent.  However,  evidence  indicates  these 
assumptions  are  flawed  and  the  United  States  is  vulnerable  to  strategic  surprise.  In  fact, 
according  to  Eliot  Cohen,  “One  might  usefully  call  the  past  dozen  years  ‘the  age  of  surprises.’ 
The  US  government  has  been  surprised  by  the  end  of  the  Warsaw  Pact,  the  disintegration  of  the 
Soviet  Union,  the  Iraq  invasion  of  Kuwait  and  the  ensuing  Persian  Gulf  War,  the  Asian  Financial 
Crisis,  the  Indian  and  Pakistani  nuclear  detonations,  and  now  the  events  of  September  11,  2001. 
There  is  no  reason  to  think  the  age  of  surprises  is  over,  and  there  are  many  reasons  to  think  we 
are  still  at  its  beginning.”^ 


Notes 

*  Eliot  Cohen,  “A  Tale  of  Two  Secretaries,”  Foreign  Ajfairs  81,  no.  3  (May-Jun  2002):  42. 


Introduction 


Today,  the  United  States  military  faces  two  overriding  challenges.  It  must  find  a  way  to 
provide  adequate  national  security  for  the  nation  with  a  smaller  force  structure  while 
simultaneously  coping  with  a  complex  post-Cold  War  international  security  environment. 
Military  leaders  are  confident  they  can  meet  these  challenges  by  adopting  and  incorporating  new 
advanced  computer  systems  and  global  communications  network  technologies  into  all  branches 
of  the  military.  ^  This  transformation  rests  upon  the  assumption  that  integrating  new  information 

technologies  will  provide  the  US  military  with  information  superiority  over  any  adversary,  at  any 
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time,  across  the  full  spectrum  of  conflict. 

In  theory,  information  superiority  will  provide  an  insurmountable  advantage  over  any 

adversary,  allowing  the  US  armed  forces  to  collect,  process,  and  disseminate  an  uninterrupted 

•1 

flow  of  information  while  exploiting  and  denying  an  adversary’s  ability  to  do  the  same.  Such 
an  advantage  will  provide  superior  knowledge  to  soldiers,  airmen,  sailors,  and  marines,  allowing 
them  to  get  inside  the  enemy’s  kill  chain.  Joint  Vision  2020,  identified  information  superiority 
as  the  essential  element  for  US  military  transformation.  By  enabling  a  handful  of  new  joint 
operational  concepts — dominant  maneuver,  precision  engagement,  full-dimensional  protection, 
and  focused  logistics — the  US  expects  to  obtain  overwhelming  advantages  against  any 
opponent.^  The  importance  of  the  idea  of  information  superiority  and  the  advantage  it  provides 
is  nothing  new.  Sun  Tzu  clearly  understood  it  centuries  ago  when  he  said,  “Know  the  enemy  and 
know  yourself;  in  a  hundred  battles  you  will  never  know  peril.”^ 
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Accurate,  timely,  information  will  be  a  critical  element  of  US  national  military  power  in  the 
future.  However,  the  assumption  made  in  JV2020  that  US  forces  will  be  able  to  secure 
information  superiority  against  any  adversary  across  the  entire  speetrum  of  warfare  is  in  direct 
conflict  with  the  notion  that  the  US  can  be  denied  information  superiority  by  a  savvy  and 
determined  adversary  or  simply  by  its  own  inability  to  suecessfully  analyze  and  correetly 
interpret  the  growing  avalanche  of  raw  intelligence  data  being  collected  daily. 

Sinee  information  superiority  is  considered  the  relative  information  advantage  held  over  an 
opponent,  surprise  can  be  thought  of  as  a  type  of  information  advantage  that  one  side  obtains 
over  another.  The  dietionary  defines  “surprise”  as,  “an  attack  made  without  warning  or  to  take 
unawares.”^  A  surprise  attack  on  the  US  aimed  at  denying  information  superiority  could  be 
either  aetive  or  passive  and  take  several  forms.  For  example,  the  infrastrueture  used  for  US 
collection,  analysis,  and  dissemination  of  information  eould  be  targeted  directly  for  destruction 
or  disruption.  In  a  similar  fashion,  friendly  information  itself  could  be  successfully  attacked  by 
stopping,  overloading,  interrupting,  delaying,  or  corrupting  it.  Therefore,  it  follows  that  if  the 
US  is  unable  to  colleet,  interpret,  or  disseminate  critical  information  in  a  timely  manner,  its 
military  forees  will  be  surprised.  The  seriousness  of  such  an  attack  would  depend  on  the  level  of 
information  denial  or  disruption  achieved  by  an  enemy,  but  any  level  of  surprise  will  invalidate 
the  presumption  of  information  superiority  at  that  time.  Thus,  the  assumption  of  information 
superiority  that  dominates  current  US  military  thinking  will  not  prevent  the  US  from  being 
suseeptible  to  strategic  surprise  in  the  future  and,  in  some  respeets,  will  make  it  more  likely  and 
more  difficult  for  the  US  to  prevent. 
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This  paper  explores  the  vulnerability  of  the  US  to  strategic  surprise  from  an  enemy  attack  in 


the  information  realm.  Specifically,  it  examines  vulnerabilities  to  US  information  within  the 
operations  arena  and  the  critical  role  human  perception  plays  between  intelligence  and  surprise. 
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Information  as  a  US  Center  Of  Gravity 


Information  has  taken  on  such  critical  importance  for  US  economic,  military,  and 
political  well  being  that  it  has  been  called  the  nation’s  “life  blood.”^  In  fact,  former  Senator 
Robert  Kerry  has  likened  the  US  information  infrastructure  to,  “a  carotid  artery  where  the  nation 

o 

could  bleed  to  death  if  the  financial  system  or  power  grid  were  shutdown.” 

Embracing  the  new  Information  Age,  the  US  has  become  completely  dependent  on  the 
application  of  state-of-the-art  computer  and  communication  technologies.  For  example,  it  is 
estimated  that  over  three  trillion  dollars  in  stocks,  bonds,  and  currencies  are  traded  on  the  global 
electronic  market  daily — or  the  equivalent  of  one  and  a  half  times  the  annual  US  budget.^  Also, 
the  American  military  has  tried  to  take  advantage  of  the  huge  benefits  that  instantly  available 
information  provides.  In  this  new  age,  interconnectivity  and  dispersed  computing  power  have 
significantly  increased  access  to  and  dependence  upon  information,  making  the  places  it  resides 
(such  as  databases,  programs,  and  networks)  more  attractive  targets.  Therefore,  information 
itself  must  be  protected  because  it  can  be  used  as  a  weapon  or  become  the  target  of  attack.  As 
long  as  defensive  countermeasures  lag  behind  offensive  information  weapons,  the  US  will  be 
vulnerable  to  attacks  that  make  traditional  physical  security  measures  less  meaningful.  Near 
total  dependence  by  the  US  on  information  systems,  linked  to  other  computer  systems  with 
limited  protection,  presents  an  avenue  of  attack  for  those  wishing  America  harm.  Finally,  since 
the  cost  of  conducting  information  warfare  is  cheap  compared  to  conventional  warfare,  many 
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additional  actors  besides  traditional  nation  states  ean  be  expeeted  to  populate  the  field  of  possible 
attackers. 

In  On  War,  Carl  von  Clausewitz  defined  center  of  gravity  as  “the  hub  of  all  power  and 
movement,  on  whieh  everything  depends.”'*^  With  America  so  reliant  upon  information  as  a 
source  of  strength  over  all  eompetitors,  information  has  evolved  into  a  eenter  of  gravity  for  the 
United  States. Although  technology  in  the  information  age  has  greatly  benefited  the  US,  over 
reliance  on  it  has  the  potential  to  make  the  country  susceptible  to  great  harm.  British  scientist 
C.P.  Snow  summed  it  up  best  when  he  wrote,  “Technology  is  a  queer  thing.  It  brings  you  great 
gifts  with  one  hand,  and  it  stabs  you  in  the  back  with  the  other.”  Snow’s  insight  was  driven 
home  during  Operation  Enduring  Freedom  when  a  member  of  the  US  Special  Forces  was  killed 
while  trying  to  eall  in  an  air  strike  on  nearby  Taliban  forees.  Despite  grave  danger,  his  death  was 
not  caused  by  the  enemy  but  because  the  batteries  in  his  handheld  Global  Positioning  System 
(GPS)  ran  out.  After  he  replaeed  them  and  switehed  his  GPS  unit  back  on,  the  grid  coordinate 
reading  defaulted  to  his  own  position.  Unaware  of  this  gliteh,  he  then  passed  his  own 
coordinates  to  a  circling  US  aircraft  that  delivered  a  bomb  on  the  designated  target  with  tragic 
results. 

Adversaries  understand  how  information  and  supporting  infrastructures  can  be  used  to 
eripple  or  weaken  the  US  by  attacking  critical  vulnerabilities  of  this  center  of  gravity.  Beeause 
an  enemy  could  use  proven  techniques  and  procedures  to  eonduct  an  asymmetric  information 
attack  to  deny  the  US  aecess  to  vital  infrastrueture  and  disrupt  command,  control, 
communications,  and  intelligence  networks,  the  Central  Intelligence  Ageney  (CIA)  “treats 
information  warfare  as  one  of  two  main  threats  to  US  national  seeurity,  the  other  being  weapons 
of  mass  destruction.”^^  An  information  attack  of  any  size  would  constitute  a  weapon  of  mass 
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disruption  at  the  very  least,  and  if  it  crippled  infrastructure  or  databases  irrevocably,  it  too  would 
be  a  weapon  of  mass  destruction.  Recognizing  that  information  has  become  a  center  of  gravity 
for  US  military,  political,  and  economic  power,  many  futurists  theorize  that  the  US  is  quickly 
approaching  a  time  when  a  terrorist  or  cyber  warrior  might  be  able  to  do  more  damage  to  the  US 
with  a  keyboard  than  a  bomb.^^ 

Post-Post  Cold  War  Security  Threats 

As  the  US  continues  to  increase  its  reliance  upon  information  and  the  systems  that 
provide  support  to  its  economic  and  military  leadership,  it  has  taken  up  a  dual-edged  sword. On 
the  one  hand,  the  integration  of  information  systems  by  the  US  offers  great  advantages,  but  on 
the  other,  it  creates  new  and  unexpected  vulnerabilities.  A  recent  DoD  warning  labeled  the 
insecurity  of  the  National  Information  Infrastructure  “a  tunnel  of  vulnerability.”  As  such,  the 
threat  of  a  terrorist  exploiting  this  vulnerability  to  destroy  or  penetrate  and  manipulate  key 
information  systems  or  infrastructure  could  cripple  or  negate  US  attempts  to  dominate  the 
information  domain  through  information  superiority.*^ 

Globalization  has  been  portrayed  by  writers  in  the  developed  Western  world  as  a  force 
for  prosperity  and  peace.  However,  the  rest  of  the  world  takes  a  much  different  view,  routinely 
sighting  this  phenomenon  as  the  underlying  cause  for  a  decline  in  traditional  cultural  values,  a 
weakening  of  the  state,  and  a  breakdown  in  social  order.  These  negative  aspects,  both  real  and 
perceived,  have  been  used  by  non-Western  states  and  disenfranchised  groups  as  a  reason  to 
foster  intolerance  and  violence  through  religious  fundamentalism,  terrorism,  racism,  and  ultra¬ 
nationalism.  Because  globalization  is  seen  by  these  groups  as  benefiting  some  while  leaving 
others  behind,  these  groups  often  resort  to  terrorism  to  exact  revenge  for  the  perceived  wrongs 
and  injustice  that  globalization  has  inflicted  upon  them.  Their  willingness  to  attack  anywhere 
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at  anytime  using  increasingly  destructive  weapons  and  sophisticated  techniques  against  civilian 
targets  represents  a  new  and  serious  threat  to  US  security 

The  former  head  of  the  Defense  Intelligence  Agency  (DIA),  LTG  Patrick  Hughes,  has 
stated  that  although  traditional  threats  from  the  Soviet  Union  have  diminished,  the  US  is  now 
faced  with  a  vastly  more  complex,  diverse,  and  unpredictable  strategic  threat  environment.  He 
believes  three  areas  of  the  threat  are  particularly  dangerous  to  US  security:  “the  rise  of 
ideologies  opposed  to  US  interests;  a  change  in  the  psychology  of  conflict  based  on  hatred  or 
religion;  and  extreme  difficulty  in  determining  the  capability,  intentions,  and  will  of  an 
opponent.”  Furthermore,  according  to  Secretary  of  Defense  Rumsfeld,  the  overwhelming 
conventional  capability  that  the  US  demonstrated  in  the  Gulf  War  and  since  will  probably 
prevent  any  future  competitor  from  engaging  America’s  armed  forces  head-to-head.  Instead,  he 
believes  that  future  competitors  can  be  expected  to  challenge  the  US  through  the  use  of 
“asymmetric”  means  that  allow  them  to  capitalize  on  their  strengths  while  trying  to  exploit  US 
vulnerabilities.^^ 

When  al  Qaeda  terrorists  attacked  the  World  Trade  Center  and  the  Pentagon  the  US 

27 

entered  into  what  Secretary  of  State  Colin  Powell  has  called,  “the  post-post-Cold  War”  world. 
Prior  to  that  event,  the  US  felt  safe  and  secure  at  home.  This  asymmetric  attack  illustrates  the 
grave  danger  to  the  US  transnational  terrorists  now  pose  and  how  powerful  information  age  tools 
can  be  used  to  support  deadly  surprise  attacks.  The  perpetrators  used  global  information 
systems  and  networks  such  as  cell  phones,  e-mail,  and  the  Internet  for  command  and  control  and 
commercial  airliners  as  guided  missiles  to  kill  over  3,000  people  while  striking  at  the  heart  of 
America’s  financial  and  military  symbols. 
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The  transparency  provided  today  by  sophisticated  intelligence  collection  systems  provides 
the  US  with  macro-level  knowledge  of  opponents  through  pattern  recognition.  This  capability 
allows  the  US  to  see  enough  of  a  state  actor’s  conventional  capability  to  make  it  unlikely  that  it 
will  be  surprised.  However,  because  non-state  actors  rely  on  unconventional  war  as  their  method 
of  fighting,  and  because  US  intelligence  systems  are  not  nearly  as  effective  against  this  type  of 
threat,  the  likelihood  of  surprise  becomes  more  probable.  The  probability  of  surprise  being 
inflicted  on  the  US  is  a  function  of  the  strategic  environment.  In  other  words,  the  type  of  actor 
(state  or  non-state)  and  type  of  war  (conventional  or  unconventional)  being  considered 
determines  the  likelihood.  Figure  1  illustrates  the  relationship  between  these  four  variables  and 
the  probability  of  achieving  strategic  surprise  against  the  US. 

Figure  1.  Likelihood  of  Surprise. 

TYPE  OF 
WAR 

CONVENTIONAL  UNCONVENTIONAL 

STATE 

TYPE  OF 
ACTOR 

NON-STATE 


One  other  important  factor  not  represented  in  this  matrix  must  be  considered  when  trying  to 
determine  the  chance  of  surprise.  The  wildcard  in  assessing  an  adversary’s  intentions  and  the 
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-  + 
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FIG.  1  LIKELIHOOD  OF 
SURPRISE 
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likelihood  of  surprise  is  misealeulation.  In  order  to  understand  misealeulation,  we  must  first 
understand  pereeption.  Pereeption  is  a  human  eognitive  skill  that  is  subjeet  to  both  eonseious 
and  uneonseious  influenees.  Therefore,  in  a  eomplex  strategie  environment  filled  with  limited, 
ambiguous,  and  ineomplete  information,  there  is  a  high  probability  for  mispereeption  of  the  true 
meaning  of  information  or  events.  Sueh  mispereeption  leads  direetly  to  misealeulation  or  taking 
a  risk  that  the  aetual  eireumstances  and  situation  do  not  warrant  to  a  rationale  actor.  Based  on 
this,  the  probability  of  miscalculation  by  an  adversary  makes  the  chance  of  the  US  becoming  a 
victim  of  strategic  surprise  more  likely. 

Information  Operations  and  Information  Superiority 

AFDD  2-5,  Information  Operations,  defines  information  operations  (10)  as  “actions  to 
affect  adversary  information  and  information  systems  while  defending  one’s  own  information 
and  information  systems”  and  divides  it  into  two  major  subcategories — Information-in- Warfare 
(IIW)  and  Information  Warfare  (IW).  IIW  relates  to  the  gain  and  exploit  aspects  of  10;  IW 
corresponds  to  the  attack  and  defend  aspects  of  10.^^ 
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Figure  2.  Illustrates  the  relationships. 
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Fig.  2  Information  Superiority  is  a 
product  of  Information  Operations. 
(AFDD  2-5) 
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How  10  works  to  produce  information  superiority  also  provides  a  roadmap  on  how  an 
opponent  can  attack  it,  defeat  it,  or  deny  it.  First,  an  enemy  can  deny  the  US  information 
superiority  by  successfully  conducting  indirect  or  direct  information  warfare.  Second,  a  failure 
to  defend  or  protect  friendly  information  can  result  in  information  superiority  being  lost.  Third, 
technology  might  provide  information  transparency  against  an  opponent,  but  then  be  wasted  if 
military  and  civilian  leaders  fail  to  respond  appropriately  because  of  growing  uncertainty 
resulting  from  information  overload.  Such  results  would  cripple  any  response  to  meet  and 
defeat  the  threat.  Because  the  US  military  has  become  so  dependent  on  the  receipt  of  timely, 
uninterrupted,  and  accurate  flow  of  information,  future  asymmetric  attacks  will  try  “to  disrupt, 
deny,  degrade,  destroy,  or  deceive  US  information  or  information  systems”  in  an  attempt  to 
prevent  the  US  from  obtaining  information  superiority. 
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How  might  opponents  attack  US  information  to  deny  information  superiority?  First,  all 
unprotected  electronic  equipment  could  be  rendered  useless  if  exposed  to  an  electro-magnetic 
pulse  (BMP).  Such  an  BMP  could  be  released  either  from  the  detonation  of  a  small  nuclear 
device  in  the  atmosphere  or  from  a  conventional  BMP  generator  on  the  ground.  To  understand 
the  impact  of  such  an  attack,  consider  that  in  1962  the  US  detonated  a  nuclear  device  in  the 
atmosphere  over  the  Pacific  Ocean  destroying  electronic  monitoring  equipment  nearby  and 

TO 

seriously  disrupting  telephone  and  electric  service  in  Hawaii  over  800  miles  away.  If  an  BMP 
were  used  against  a  major  US  metropolitan  area  like  New  York  City,  the  impact  could  be 
devastating.  Semiconductors  used  today  are  at  least  10  million  times  more  sensitive  to  damage 
from  an  BMP  than  vacuum  tubes  used  in  the  past.^"^  Communications  systems,  computer  chips, 
the  air  traffic  control  system,  financial  networks,  and  the  electric  grid  would  be  knocked  out  or 
seriously  impaired.  Another  way  to  deny  the  US  information  would  be  to  target  its  intelligence, 
surveillance,  and  reconnaissance  (ISR)  collection  capability  by  jamming  ISR  platform  sensors, 
using  encryption  or  frequency  hopping  devices  to  transmit  signals,  or  switching  from  radio  and 
land  line  telephone  technologies  to  light  fiber,  which  does  not  emit  any  signals  for  ISR  sensors  to 
collect.  Also  in  the  electronic  realm,  simple  jamming  of  US  radio  and  data  link  communications 
as  well  as  GPS  -aided  systems  could  adversely  affect  US  military  operations. 

Information  could  also  be  denied  to  the  US  by  introducing  a  virus,  “logic  bomb,”  or  some 
other  pernicious  software  code  into  key  US  computer  systems. The  potential  effect  of  these 
and  many  other  electronic  warfare  techniques  could  potentially  render  all  targeted  and 
unprotected  electronic  equipment  useless.  During  the  Gulf  War,  the  US  supposedly  shut  down 
Iraq’s  air  defense  system  with  a  virus  it  introduced  into  that  country’s  air  defense  system.  If  such 


II 


a  technique  were  successfully  used  against  the  US,  it  could  result  in  computer  gridlock  for  hours, 
days,  or  weeks. 

Numerous  confirmed  cases  of  successful  unauthorized  intrusions  into  US  computer 
systems  and  databases  exist.  Such  intrusions  can  be  used  to  manipulate,  exploit,  or  corrupt  US 
information.  Rogue  elements  within  Russia  are  known  to  have  successfully  penetrated  dozens  of 
US  military  installations  and  industry  computer  networks  through  overseas  Internet  connections 
in  an  attempt  to  steal  sensitive  weapons  guidance  information  and  naval  intelligence  codes. 
Recently,  hackers  broke  into  the  Air  Force  Research  Laboratory  in  Rome,  New  York  over  150 
times  and  shut  down  33  lab  computer  networks  for  several  days.  During  this  attack,  the  hackers 
copied  sensitive  air  tasking  order  information  with  the  intention  of  offering  it  for  sale  to  the 

o  o 

highest  bidder.  The  perception  that  only  opponents  of  the  US  who  possess  little  military  power 

will  engage  in  asymmetric  information  warfare  against  America  would  be  wrong. 

Such  activities  are  not  confined  to  individuals  or  fringe  elements.  China  has  placed  a 

high  priority  on  developing  ways  to  destroy  or  neutralize  US  military  information  and 

infrastructures  used  to  support  high-tech  weapons,  intelligence  sensors,  and  command  and 

control  functions  through  a  new  concept  labeled  “Unrestricted  Warfare.”  A  researcher  at 

China’s  Academy  of  Military  Science  observed, 

if  digital  [i.e.  digitized]  forces  lose  the  power  to  control  information,  they  will  not 
be  able  to  stand  up  to  mechanized  forces  [such  as  the  People’s  Liberation 
Army’s].  If  they  fail  to  acquire  or  transmit  information,  digital  forces  will  be 
paralyzed,  their  combat  capability  would  shrink  rapidly,  and  they  will  lose  the 
initiative  on  the  battlefield.^*^ 

In  support  of  this  new  military  thrust,  China  has  developed  cutting  edge  software  that  can  allow  a 
hacker  to  learn,  adapt,  and  manipulate  computer  data.  This  type  of  software  has  already  been 
used  by  China.  According  to  RAND’s  Hame  Mulvenon,  “the  target  so  far  has  been  Taiwan’s 
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command  and  control  systems  with  the  ultimate  goal  of  hacking  into  US  military  networks  that 
support  deployments  to  the  region.”"^' 

An  adversary  can  also  use  military  deception  to  create  a  false  illusion  of  reality  that 
denies  the  US  true  information  necessary  to  make  a  proper  decision.  For  example,  although  the 
destructive  potential  of  Scud  missiles  presented  an  inconsequential  military  threat  to  US  and 
coalition  forces  during  the  Gulf  War,  Saddam  Hussein  tried  to  turn  it  into  a  strategic  weapon  by 
firing  it  on  Israel  in  an  attempt  to  draw  that  country  into  the  war  and  divide  the  coalition.  This 
move  forced  the  US  to  redirect  significant  ISR  and  airpower  assets  to  try  to  locate  and  destroy  all 
Iraqi  Scud  missiles  within  range  of  Israel.  Despite  having  state  of  the  art  ISR  capabilities  and  the 
freedom  to  collect  without  interference  from  the  enemy,  US  and  coalition  forces  could  not 
effectively  track  down  and  kill  Iraq’s  missiles  during  the  war.  Iraq  was  able  to  accomplish  this 
surprising  feat  through  camouflage,  concealment,  and  deception.  It  skillfully  employed  decoys 
that  could  not  be  recognized  as  fake  from  25  yards  away  while  at  the  same  time  concealing  the 
real  missiles  and  transporters  from  coalition  strike  aircraft  beneath  low  clearance  highway 
overpasses.  The  effectiveness  of  Iraq’s  deception  involving  Scuds  is  underscored  by  the  fact  that 
F-15Es  flew  over  1,400  sorties  against  this  target  set  and  recorded  zero  confirmed  kills. 

In  1998  deception  was  successfully  used  again  against  the  US  in  Kosovo.  There,  enemy 
forces  used  decoy  tanks  and  armored  personnel  carriers  to  great  effect  in  reducing  the  attrition 
from  allied  air  strikes  during  operation  Allied  Force.^"^  Such  deception  by  the  enemy  causes 
friendly  forces  to  waste  sorties  and  munitions  on  meaningless  targets.  It  also  can  lead  to  faulty 
intelligence  analysis  on  the  status  of  enemy  forces  being  passed  to  key  US  military  and  political 
decision  makers.  US  leaders  are  dependent  on  accurate  and  timely  intelligence  about  the  enemy 
to  properly  synchronize  and  apply  the  right  forces  to  the  right  targets. 
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Intelligence  Collection 


All  information  operations  are  important  to  achieving  information  superiority,  but 

intelligence  is  especially  important  and  must  be  considered  first  among  equals/  In  the  future, 

the  quest  to  achieve  information  superiority  and  avoid  surprise  will  depend  on  the  ability  of  US 

forces  to  be  supplied  with  timely  and  accurate  intelligence  on  the  enemy  and  the  potential 

operational  environment.  As  opponents  adopt  new  information  technologies  to  support  their 

own  offensive  and  defensive  information  operations,  such  technologies  make  US  monitoring  of 

potential  threats  significantly  more  challenging.  Because  “information  systems”  do  not 

necessarily  manifest  themselves  in  the  form  of  physical  things  (like  ships,  planes,  and  tanks),  US 

Cold  War-era  intelligence  collection  platforms  are  currently  not  able  to  monitor  opponent 

-1 

information  system  development,  testing,  and  deployment  in  a  meaningful  way.  Furthermore, 
no  intelligence  organization  can  prevent  surprise  from  a  known  or  unknown  actor  if  it  does  not 
understand  that  the  threat  exists.  Without  a  perceived  threat,  the  intelligence  collection  process 
cannot  be  efficiently  and  accurately  applied.  During  the  Scientific  Advisory  Board  debrief  on 
Predictive  Battlespace  Awareness,  “98  percent  of  collected  intelligence  data  ends  up  on  the 
cutting  room  floor.”^  The  report  goes  on  to  state,  “existing  ISR  data  often  ends  up  on  the  floor 
because  of  the  lack  of  someone  who  cares  about  the  data  (or  knows  they  should  care).”^  Despite 
spending  a  combined  $12.6  billion  annually  on  classified  imagery,  a  lack  of  coordination  and 
duplication  of  effort  while  neglecting  other  areas  led  to  a  failure  on  the  part  of  the  US 
intelligence  community  to  provide  any  advanced  warning  of  the  nuclear  tests  conducted  by  India 
in  1998.^  As  a  result,  this  test  took  the  US  by  complete  surprise. 
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Unfortunately,  today  US  intelligence  agencies  are  not  well  suited  to  anticipate,  analyze, 
and  investigate  asymmetric  threats  that  now  pose  the  greatest  danger  to  US  national  security.^ 
The  magnitude  of  the  challenge  facing  US  intelligence  agencies  to  ferret  out  individuals  or 
organizations  planning  to  attack  the  United  States  and  therefore  prevent  surprise  is  clear  when 
one  considers  that  a  cyber-attack  on  information  or  supporting  infrastructure  can  be  originated 

o 

from  almost  any  one  of  100  million  computers  now  connected  to  the  Internet.  When  such  wide 
access  is  combined  with  the  knowledge  that  US  commercial  systems  largely  operate  without 
built-in  security  measures,  the  potential  threat  of  a  digital  Pearl  Harbor  attack  is  frighteningly 
real  to  the  intelligence  community.^ 

In  order  to  prevent  future  surprise,  the  US  intelligence  community  must  move  away  from 
its  almost  total  reliance  on  space-based  sensors  as  the  primary  means  to  collect  data.^°  After  the 
terrorist  attacks  on  September  11,  2001,  senior  officials  requested  funds  beyond  the  $10  billion 
spent  annually  on  counter-terrorism  to  increase  human  intelligence  (HUMINT)  capabilities.^^ 
But  HUMINT  intelligence  has  its  own  drawbacks.  To  guard  against  a  double  cross,  the 
reliability  of  incoming  HUMINT  intelligence  must  always  be  crosschecked  by  other  means,  and 
the  source  must  continuously  be  vetted  for  loyalty  and  reliability. 

Even  though  HUMINT  offers  the  best  method  to  determine  the  intentions  and  actions  of 

enemies  to  the  US,  such  as  terrorists  who  rely  on  asymmetric  attack,  no  intelligence  source  can 

address  the  “weakest  link”  in  computer  security.  According  to  computer  hacker  Kevin  Mitnick, 

“the  government’s  best  efforts  to  stem  the  rising  tide  of  computer  crime  will  be  largely 

ineffective  unless  those  efforts  address  the  human  failures  that  make  most  computer  intrusions 

possible... money  spent  on  assessing  computer  vulnerabilities  and  security  measures  is  wasted 

12 

because  none  of  them  address  the  weakest  link  in  the  computer  security  chain.” 
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Human  failings  that  compromise  computer  and  information  security  can  be  divided  into 

two  categories — innocent  mistakes  and  criminal  conduct.  Innocent  mistakes  take  the  form  of 

unintended  system  compromise  through  unintended  password  compromise  or  system  access. 

On  the  other  hand,  there  have  always  been  individuals  willing  to  betray  the  US  and  compromise 

vital  information  for  money  or  because  of  misplaced  loyalty.  One  of  the  best  known  cases 

involves  John  Walker,  who  worked  as  a  Soviet  spy  for  over  18  years.  During  that  time  he  sold 

1  ^ 

secrets  that  compromised  naval  intelligence  codes,  code  machines,  and  classified  documents. 

A  more  recent  case  concerns  former  CIA  agent  Aldrich  Ames.  The  damage  he  inflicted  during 
nine  years  of  spying  was  not  limited  to  the  thousands  of  pages  of  classified  documents  he  turned 
over  to  the  Soviets.  The  treachery  in  this  case  took  a  high  toll  in  blood  when  Ames’  betrayal  led 
to  the  arrest  and  execution  of  10  Soviet  officials  for  spying  on  behalf  of  the  US  against  the  Soviet 
Union. However,  not  all  spies  are  motivated  by  money.  Jonathan  Pollard,  a  US  Navy 
intelligence  analyst,  was  led  to  spy  on  behalf  of  Israel  because  of  his  religion  and  uncontrollable 
desire  to  assist  that  country  by  whatever  method  possible.  Pollard  used  his  access  to  classified 
intelligence  libraries  to  freely  pass  over  1,000  classified  documents  to  Israeli  intelligence 
handlers.  Today  the  intelligence  community  relies  on  efficient  sources  that  allow  greater 
protection  and  ease  of  access  at  the  cost  of  more  inclusive  forms  of  intelligence  that  provide 
greater  security.*^  As  long  as  the  US  continues  to  pursue  intelligence  methods  and  means  that  do 
not  adequately  address  threats  across  the  spectrum,  it  will  remain  vulnerable  to  a  surprise  attack. 
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Intelligence,  Perception,  and  Surprise 


According  to  John  Boyd,  the  father  of  the  Observation-Orientation-Decision-Action 
(OODA  loop),  the  fundamental  key  to  victory  in  war  is  human  perception.  Boyd  believed 
perception  was  key  because  only  humans  fight  wars.  Other  factors  such  as  circumstances,  terrain, 
and  weapons  were  less  important.  Because  the  OODA  loop  offers  a  comprehensive  and  simple 
methodology  for  operating  at  a  faster  tempo  than  the  enemy,  it  makes  US  actions  appear  to  be 
ambiguous  (unpredictable)  to  the  enemy,  causing  confusion  and  disorder  in  their  response. 
Therefore,  Boyd  believed  that  getting  “inside  the  mind  of  the  enemy”  and  beating  him  to  the  next 
move  by  operating  at  a  faster  tempo  is  where  battles  are  won.  Today  the  OODA  loop  is 
employed  throughout  the  US  military  and,  when  supported  with  accurate  and  timely  intelligence, 
provides  a  crucial  military  advantage.^ 

Intelligence  plays  a  vital  role  in  every  level  of  successful  military  operations  and  is 
especially  important  for  allowing  the  US  to  operate  inside  an  enemy’s  decision  cycle.  Proper 
employment  of  collection  and  analysis  assets  is  essential  for  commanders  to  gain  and  maintain 
information  superiority.  Without  accurate  intelligence,  US  forces  will  lose  essential  advantages 
of  surprise,  operational  security,  and  flexibility.  It  is  the  function  of  intelligence  to  collect  data 
and  provide  information  to  decision  makers.  Joint  Publication  1-02  defines  intelligence  as: 

(1)  The  product  resulting  from  the  collection,  processing,  integration,  analysis, 

evaluation,  and  interpretation  of  available  information  concerning  foreign 

countries  or  areas.  (2)  Information  and  knowledge  about  an  adversary  obtained 

2 

through  observation,  investigation,  analysis,  or  understanding. 
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Thus,  information  is  the  essential  product  from  which  all  intelligence  supporting  information 
superiority  flows. 

But  what  is  information?  A  generally  accepted  information  hierarchy  (Figure  3) 
illustrates  distinct  levels  of  “information.”  At  the  bottom  are  data— observable  raw  facts. 
"Information,”  derived  from  data,  consists  of  the  trends  or  patterns  that  emerge  from  quantities 
of  perceived  data.  The  third  layer,  “knowledge,”  represents  attempts  to  discern  the  truth 
through  reasoning.  "Wisdom”  results  from  gaining  insight  from  knowledge."^  Finally,  there  is 
“truth,”  an  accurate  understanding  of  reality  and  the  meaning  of  information.  Truth  is  where 
perception  and  reality  are  one  in  the  same  or  in  agreement. 


Figure  3.  Information  Hierarchy. 


These  five  levels  of  the  information  hierarchy  relate  to  the  OODA  decision-making  cycle. 
First,  Observation  acquires  data.  Next,  Orientation  converts  the  data  into  information.  Then, 
Decide  converts  information  into  orders.  And  finally.  Act  converts  orders  into  action.  The 
process  is  a  loop  because  as  you  act,  you  observe  the  results  and  start  the  process  all  over  again. ^ 
See  Figure  4. 
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Figure  4.  OODA  Loop  &  Information  Hierarchy 


FIG.  4.  OODA  LOOP  & 
INFORMATION  HIERARCHY 


However,  information  in  the  context  of  military  intelligence  may  not  accurately  describe 
reality  for  three  reasons.  First,  information  used  for  intelligence  purposes  can  be  manipulated  or 
distorted  by  an  adversary.  Second,  information  derived  from  intelligence  is  a  product  of  human 
perception  and  therefore  subjective  in  nature,  making  it  subject  to  bias  or/and  misreading  of  the 
true  meaning.  Third,  relevant  signals  (desired  information)  do  not  exist  in  a  vacuum.  Signals  can 
be  overlooked  because  of  their  ambiguous  nature  or  simply  become  lost  in  an  overwhelming 
cascade  of  noise  (irrelevant  information)  that  is  collected  in  the  intelligence  process.^  No  matter 
what  the  reason,  corruption,  misperception,  or  missed  signals,  bad  or  very  limited  information 
inevitably  taints  the  levels  above  them  in  the  information  hierarchy  and  negatively  impacts  the 
OODA  decision-making  cycle.  Therefore,  protection  of  information  becomes  critical  to  the 
integrity  of  knowledge,  wisdom,  truth,  and  to  the  accuracy  and  appropriateness  of  decision¬ 
making  that  lies  at  the  heart  of  vulnerability  to  surprise. 

The  damage  that  can  be  done  when  a  leader  bases  decisions  upon  corrupted  information 
or  misinterprets  accurate  information  cannot  be  overstated.  Hitler’s  response  to  the  Allied 
invasion  of  Europe  in  World  War  II  offers  a  perfect  example.  Incredibly,  for  weeks  after  the 
Allies  landed  at  Normandy  on  D-Day  and  subsequently  pushed  twelve  divisions  ashore.  Hitler 
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remained  convinced  that  the  “main  Allied  invasion  force”  would  strike  at  anytime  further  north 
on  the  French  coast  at  Pas-de-Calais.  For  this  reason,  he  rebuffed  all  pleas  from  his  field 
commanders  to  release  the  Panzer  forces  situated  around  Calais  so  they  could  take  part  in  a 
counterattack  on  the  Allied  forces  at  Normandy.  Why  did  Hitler  fail  to  respond  appropriately  to 
the  invasion?  First,  he  was  the  victim  of  a  successful  Allied  deception  campaign,  “Operation 
Fortitude,”  that  planted  information  indicating  that  Pas-de-Calais  would  be  the  sight  of  the  main 
Allied  invasion.  Second,  this  deception  effort  reinforced  what  Hitler  wanted  to  believe.  Because 
the  Pas-de-Calais  area  offered  the  shortest  distance  across  the  English  Channel  for  the  Allies,  it 
made  the  most  sense  from  a  logistics  and  lines  of  communications  standpoint.  Thus,  when  the 
D-Day  landings  occurred.  Hitler  failed  to  make  timely  decisions,  thereby  missing  the  opportunity 
to  annihilate  the  invaders  while  their  backs  were  to  the  sea. 

The  1991  Gulf  War  offers  two  more  examples  of  how  false  perceptions  can  result 
surprise.  Before  the  A1  Fridos  bunker  in  downtown  Baghdad  was  destroyed  by  F-117s,  US 
intelligence  knew  that  the  facility  was  constructed  as  an  air-raid  shelter  for  the  general 
population.  However,  Iraqi  attempts  to  camouflage  the  roof,  the  proximity  of  its  location  to  Iraqi 
intelligence  headquarters,  and  radio  emissions  from  the  site  led  American  intelligence  analysts  to 
conclude  the  facility  was  an  important  command  and  control  center  worthy  of  attack,  regardless 

o 

of  the  chances  of  noncombatants  being  killed.  The  loss  of  over  100  women  and  children  was  a 
public  relations  disaster  for  the  US.^  As  a  result,  this  single  event  accomplished  what  Iraqi  air 
defenses  had  not  been  able  to — cause  US  leaders  to  call  an  immediate  halt  to  further  air  raids  on 
downtown  Baghdad.  After  the  war  it  was  determined  this  shelter  might  have  been  a  hideout  for 
senior  Iraqi  officials,  but  it  had  minimal  radio  equipment  and  was  not  serving  as  an  important 
command  and  control  facility. The  intelligence  “failure”  in  this  case  resulted  in  a  false 
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perception,  which  in  turn  led  to  surprise  for  the  US  when  a  large  number  of  noncombatants  were 
killed. 

Finally,  the  devastating  attack  by  US  airpower  on  Iraqi  forces  retreating  from  Kuwait  in 

hundreds  of  stolen  civilian  vehicles  along  a  two-mile  stretch  of  road  that  became  known  as  the 

“Highway  of  Death”  offers  another  example.  After  the  battle,  video  footage  and  accompanying 

press  accounts  portrayed  a  scene  where  hundreds  of  Iraqi  armored  vehicles  and  thousands  of 

lives  were  lost,  and  thus,  the  victimizer  became  the  victim.*^  In  fact,  US  intelligence  analysis 

after  the  battle  revealed  a  much  different  reality.  Although  over  1,000  civilian  vehicles  had  been 

destroyed  in  the  attack,  only  28  militarily  meaningful  armored  vehicles  and  200-300  Iraqi 

soldiers  had  actually  been  killed.  But  because  the  news  networks’  version  of  events  went 

unchallenged,  the  perception  that  American  forces  conducting  a  “turkey  shoot”  against  a 

defenseless  enemy  stuck.  This  misperception  then  became  an  important  factor  in  President 

Bush’s  decision  to  end  the  war  after  only  100  hours  of  the  ground  campaign.  His  decision 

allowed  the  Republican  Guard  to  escape  destruction.  Those  same  enemy  armored  units  were 

later  instrumental  in  suppressing  the  Shiite  and  Kurdish  uprisings  inside  Iraqi  after  the  war  trying 

12 

to  overthrow  Saddam  Hussein  in  1991. 

Another  important  factor  relating  to  information,  perception,  intention,  and  truth  is  the 
element  of  time.  Effective  intelligence  is  expected  to  produce  accurate  and  timely  information. 
However,  the  information  collected  by  reconnaissance  and  surveillance  may  or  may  not  be  true 
or  “good”  (accurately  representing  reality)  at  any  given  time.  For  example,  US  reconnaissance 
flights  over  the  desert  in  western  Iraq  during  the  Gulf  War  did  not  find  Scud  missiles  because  (1) 
they  were  not  there  at  all;  (2)  successful  enemy  deception  operations  concealed  them  from 
sensors;  or  (3)  the  Scuds  were  moved  into  the  area  in  between  reconnaissance  missions.  In  all 
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three  cases,  US  intelligence  analysis  would  produce  the  same  assessment — that  no  Scuds  were 

located  in  the  sector  being  looked  at.  In  the  first  case  this  perception  would  coincide  with  the 

truth  and  be  correct.  However,  in  the  second  and  third  cases  perception  based  on  discrete 

available  intelligence  information  would  not  be  true.  From  the  second  and  third  cases,  we  can 

see  how  the  timing  of  intelligence  collection  could  provide  leaders  with  a  false  perception  of  the 

situation  and  lead  to  surprise  when  they  discovered  the  actual  reality. 

Obviously,  many  factors  can  cloud  accurate  human  perception  of  reality — cultural  bias, 

language  differences,  national  historical  experiences,  wishful  thinking,  projection  of  one’s  own 

experiences,  timing,  opponents’  doctrines  or  capabilities,  and  political  influences.  Michael 

Handel  discusses  the  disconnect  between  intelligence  and  perception: 

Intelligence  is  supposed  to  make  subjective  perception  closer  to  the  ‘objective 
reality,’  but  even  the  best  intelligence  organization  in  the  world  can  never 
guarantee  an  accurate  perception  of  the  opponent  nor  the  acceptance  of  its 
analysis.  Strategic  analysis  mistakenly  assumes  that  our  perception  of  the 
opponent  is  usually  accurate,  which  makes  the  design  and  selection  of  a  rational 
strategy  possible.  The  US  vs  Vietnam;  Israel  vs  Arabs;  Arabs  vs  Israel;  Allied 
overestimation  of  the  success  of  strategic  bombing;  and  Japan’s  conception  of  the 
US  reaction  to  the  attack  on  Pearl  Harbor  all  illustrate  the  extent  of  the  gap 
between  reality  and  perception  and  how  this  unavoidable  gap  sharply  reduces 
choosing  a  rational  strategy. 


The  fact  that  humans  are  naturally  unable  to  view  their  environment  objectively  and  prone  to 
incorrectly  perceiving  the  meaning  of  data,  along  with  the  increased  vulnerability  of  intelligence 
data  and  information  to  be  distorted  by  adversaries,  increases  the  likelihood  of  enemies  inflicting 
strategic  surprise  upon  the  US. 
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Conclusion 


The  fact  that  the  United  States  is  reliant  upon  the  free  and  uninterrupted  flow  of  accurate, 
timely,  and  complete  information  as  a  fundamental  source  of  political,  economic,  cultural,  and 
military  dominance  is  irrefutable.  Today  information  has  become  so  important  to  the  health  of 
the  nation  that  it  has  joined  only  a  handful  of  other  key  concepts  and  ideas  as  a  center  of  gravity 
around  which  all  else  revolves.  Because  current  and  future  enemies  cannot  hope  to  match 
America’s  nuclear  or  conventional  military  capabilities,  adversaries  can  be  expected  to  attack 
perceived  weaknesses  of  the  US  in  the  information  domain  through  asymmetric  warfare.  Such 
attacks  will  attempt  to  pit  their  strengths  against  US  weakness.  Today  virtually  any  actor  from 
nation  states  to  terrorist  groups  to  individual  hackers,  can  threaten  US  national  security.  Each 
can  target  and  carry  out  potentially  devastating  attacks  on  US  information  and  supporting 
infrastructure  in  an  attempt  to  deny  the  US  the  essential  enabler  for  its  2U‘  century  defense 
plans — information  superiority.  Thus,  each  could  bring  America’s  military  to  its  knees  by 
denying  it  an  indispensable  source  of  its  overwhelming  advantage. 

To  understand  how  the  loss  of  information  superiority  can  precipitate  strategic  surprise,  one 
must  appreciate  the  unique  relationship  between  information  and  intelligence.  Intelligence 
collection  is  the  means  of  gathering  data  that  is  the  basis  for  acquiring  knowledge.  In  turn,  this 
knowledge  is  used  as  a  basis  for  providing  military  and  civilian  leaders  with  intelligence 
assessments  about  an  area  of  interest  or  perceived  threat.  Such  intelligence  assessments  are  then 
used  as  a  window  into  the  strategic  threat  environment  that  channels  and  focuses  the  perception 
of  leaders  about  the  real  nature  of  a  threat  or  the  true  intentions  of  an  opponent.  These 
perceptions  about  the  security  landscape  are  then  used  to  guide  political  and  military  leaders 
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while  they  try  to  make  prudent  decisions  that  optimize  friendly  military  operations  to  defend  the 
nation.  In  the  context  of  military  security,  information  and  intelligence  are  so  closely  related 
they  cannot  be  separated.  However,  information  is  unique  because  it  possesses  a  qualitative  and 
quantitative  nature  that  influences  the  entire  decision  making  process.  Either  of  these  two 
qualities  can  negatively  influence  the  value  and  correctness  of  intelligence  assessments,  which  in 
turn,  can  lead  to  false  perceptions  by  leaders  about  a  given  situation,  circumstance,  or  event. 
Because  perception — the  key  to  how  leaders  view  the  world — is  based  on  correct  information 
supplied  by  intelligence,  misperception  of  reality  is  based  on  incorrect  information  supplied  by 
the  intelligence  process.  Misperception  then  can  be  expected  to  degrade  the  appropriateness  of  a 
leader’s  decisions. 

The  historical  examples  in  this  paper  highlight  that  US  information  is  vulnerable  to  attack. 
Because  the  US  is  vulnerable  to  information  warfare  and  information  corruption,  opponents  can 
successfully  influence  and  manage  the  perception  of  US  leaders,  meaning  they  can  also  achieve 
strategic  surprise.  Carried  to  a  logical  conclusion,  the  fact  that  the  US  has  been  shown  to  be 
vulnerable  to  surprise  negates  the  presumption  in  current  military  doctrine  that  the  US  will 
achieve  and  hold  information  superiority  over  any  opponent  across  the  entire  spectrum  of 
warfare.  This  aspect  of  current  US  military  thinking  is  clearly  false. 

As  the  civilian  and  military  masters  of  the  US  armed  forces  continue  to  trumpet  the  benefits 
and  advantages  of  transformation,  they  would  do  well  to  reconsider  that  information  superiority 
has  definite  limitations.  They  must  never  forget  that  although  information  superiority  by  US 
forces  may  be  present  at  any  one  time,  such  a  state  is  only  a  relative  advantage  and  not  an 
absolute  condition  that  will  exist  for  all  time.  Only  by  fully  appreciating  this  important  point  can 
American  military  leaders  take  the  appropriate  steps  necessary  to  adequately  man,  train,  and 
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equip  the  armed  forces.  Adequate  preparations  must  account  for  the  certain  reality  that  in  the 
decades  ahead,  on  some  far  flung  battlefield,  the  desired  US  goal  of  information  superiority  will 
give  way  to  information  parity  or  even  something  less — which  then  becomes  the  norm. 

There  is  no  doubt  that  new  Information  Age  technologies  are  transforming  the  US  military 
by  supplying  information  of  previously  unimaginable  quantity,  quality,  and  accuracy. 
Information  of  such  “richness”  can  be  used  as  a  super  lubricant  to  make  everything  work 
smoother,  faster,  and  better.  However,  the  US  military  must  guard  against  the  illusion  that 
uncertainty  on  the  battlefield  now  only  applies  to  the  enemy.  As  long  as  offensive  information 
warfare  technologies  continue  to  lead  information  security  measures  and  safeguards,  the  US  will 
remain  highly  vulnerable  to  strategic  surprise.  Since  the  likelihood  of  surprise  in  the  future  is 
almost  assured,  the  best  defense  against  a  sudden  attack  is  not  trying  to  reduce  the  probability  of 
such  an  event  happening,  but  to  develop  plans,  doctrine,  and  strategies  now  to  limit  the  extent  of 
the  damage  when  it  occurs.  Only  then  can  the  US  feel  secure  in  the  knowledge  that  it  is  better 
prepared  at  every  level  than  the  enemy — whoever  that  may  be. 
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